Server Help

Trash Talk - Another ebay scam.

Gravitron - Fri Mar 05, 2004 6:11 am
Post subject: Another ebay scam.
You would think they would have the brains to not just email people before actually checking them being an ebay user.
Who knows, were I the casual imbecile comp/Inet-challanged person, and were an eBay user, I might have fell for it.

Quote:

D e a r e B a y U s e r,

During our regular update and verification of the accounts, we couldn't verify your current information. Either your information has changed or it is incomplete.

As a result, your access to bid or buy on eBay has been restricted. To start using eBay account fully, please update and verify your information by clicki!
ng below: [editor note> "clicki!ng"? GG son]

https://scgi.ebay.com/saw-cgi/eBaylSAPl.dII?Verifylnformation [editor note> really goes to "http://scgi.ebay.comlsaw-cgilll@64.231.78.96:4903/dl/index.htm" notice it's ebay.comlsaw, not ebay.com]

Regards,
e B a y




Also, the spacing didn't look right (windows format words and the pixel spaces between their letters individually by the ascII#, this is most noticeable while typing in MS-Word, try putting a coma at the end of a sentence or type a word and replace a letter in it, see how they shift a bit).
So I highlighted it and voila, when you highlight the retarded thing, you see all these shit in between, probably the idea of a joke by the scammer.
Maybe the conspirators list is hidden between words, eitherway, beware.

Quote:


----- Original Message -----
From: eBay.com
To: ori_frid@netvision.net.il
Sent: Thursday, March 04, 2004 4:38 AM
Subject: !Warning all eBay users


I object to... Flowers ?????? Be so kind
D,e,a.rwne!Bia.ymqUlsle,r,

DuringaourmreguIaryupdatesanduverificationvofbthewaccounts,swencouIdn'tkverifyvyourqcurrentminformation.nEithersyourginformationthasrchangedyoryitgisdincomplete.

Ashanresult,pyourkaccessztoxbidyorlbuyponceBayehasmbeenzrestricted.xToqstartxusingoeBaynaccountzfully,rpIeaseiupdateuandxverifyvyourminformationfbyscIicki!
ngfbelow:
in 1876 in 1913 I object to...
https://scgi.ebay.com/saw-cgi/eBaylSAPl.dII?VerifylnformationJennifer Lopezstars battle
Rock Music Ask over there We might...
Regards,
elB:aiyinto account
Fancy that! Mother's Day The Sims
in 1998 Britney Spears
That's definetly not you.
Heat crisis in Software
Summer Olympics Thaksgiving



Here's the htmling:

Code: Show/Hide

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2719.2200" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY text=#000005 bgColor=#fffff6>
<DIV><FONT color=#000000 size=2></FONT>&nbsp;</DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV
  style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
  <A title=users-support44@eBay.com
  href="mailto:users-support44@eBay.com">eBay.com</A> </DIV>
  <DIV style="FONT: 10pt arial"><B>To:</B> <A title=ori_frid@netvision.net.il
  href="mailto:ori_frid@netvision.net.il">ori_frid@netvision.net.il</A> </DIV>
  <DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, March 04, 2004 4:38
  AM</DIV>
  <DIV style="FONT: 10pt arial"><B>Subject:</B> !Warning all eBay users</DIV>
  <DIV><BR></DIV><PRE><FONT face=Arial color=#fffff0>I object to...</FONT><FONT face=Arial> <FONT color=#fffff7>Flowers</FONT> <FONT color=#fffff8>??????</FONT> <FONT color=#fffff5>Be so kind</FONT>
D<FONT color=#fffff0 size=1>,</FONT>e<FONT color=#fffff5 size=1>,</FONT>a<FONT color=#fffff1 size=1>.</FONT>r<FONT color=#fffff3>w</FONT><FONT face=Arial color=#fffff9>n</FONT>e<FONT color=#fffff8 size=1>!</FONT>B<FONT color=#fffff1 size=1>i</FONT>a<FONT color=#fffff9 size=1>.</FONT>y<FONT color=#fffff0>mq</FONT>U<FONT color=#fffff9 size=1>l</FONT>s<FONT color=#fffff4 size=1>l</FONT>e<FONT color=#fffff0 size=1>,</FONT>r,

During<FONT color=#fffff8>a</FONT>our<FONT color=#fffff0>m</FONT>reguIar<FONT color=#fffff3>y</FONT>update<FONT color=#fffff4>s</FONT>and<FONT color=#fffff3>u</FONT>verification<FONT color=#fffff6>v</FONT>of<FONT color=#fffff0>b</FONT>the<FONT color=#fffff8>w</FONT>accounts,<FONT color=#fffff1>s</FONT>we<FONT color=#fffff4>n</FONT>couIdn't<FONT color=#fffff9>k</FONT>verify<FONT color=#fffff5>v</FONT>your<FONT color=#fffff6>q</FONT>current<FONT color=#fffff2>m</FONT>information.<FONT color=#fffff5>n</FONT>Either<FONT color=#fffff0>s</FONT>your<FONT color=#fffff5>g</FONT>information<FONT color=#fffff8>t</FONT>has<FONT color=#fffff5>r</FONT>changed<FONT color=#fffff4>y</FONT>or<FONT color=#fffff4>y</FONT>it<FONT color=#fffff3>g</FONT>is<FONT color=#fffff2>d</FONT>incomplete.

As<FONT color=#fffff8>h</FONT>a<FONT color=#fffff4>n</FONT>result,<FONT color=#fffff5>p</FONT>your<FONT color=#fffff1>k</FONT>access<FONT color=#fffff5>z</FONT>to<FONT color=#fffff1>x</FONT>bid<FONT color=#fffff0>y</FONT>or<FONT color=#fffff9>l</FONT>buy<FONT color=#fffff9>p</FONT>on<FONT color=#fffff8>c</FONT>eBay<FONT color=#fffff3>e</FONT>has<FONT color=#fffff7>m</FONT>been<FONT color=#fffff3>z</FONT>restricted.<FONT color=#fffff8>x</FONT>To<FONT color=#fffff8>q</FONT>start<FONT color=#fffff4>x</FONT>using<FONT color=#fffff9>o</FONT>eBay<FONT color=#fffff2>n</FONT>account<FONT color=#fffff3>z</FONT>fully,<FONT color=#fffff2>r</FONT><B>pIease</B><FONT color=#fffff6>i</FONT><B>update</B><FONT color=#fffff9>u</FONT><B>and</B><FONT color=#fffff5>x</FONT><B>verify</B><FONT color=#fffff8>v</FONT><B>your</B><FONT color=#fffff0>m</FONT><B>information</B><FONT color=#fffff6>f</FONT><B>by</B><FONT color=#fffff1>s</FONT><B>cIicki!
ng</B><FONT color=#fffff2>f</FONT><B>below:
</B><FONT color=#fffff6>in 1876</FONT><B> </B><FONT color=#fffff9>in 1913</FONT> <FONT color=#fffff5>I object to...</FONT><B>
</B><A href="http://scgi.ebay.com%6Csaw-cgi%6C%6C%6C@%36%34%2E%32%33%31%2E%37%38%2E%39%36:%34%39%30%33/%64%6C/%69%6E%64%65%78%2E%68%74%6D">https://scgi.ebay.com/saw-cgi/eBaylSAPl.dII?Verifylnformation</A><FONT color=#fffff9>Jennifer Lopez</FONT><FONT color=#fffff9>stars battle   </FONT>
<FONT color=#fffff7>Rock Music</FONT> <FONT color=#fffff5>Ask over there</FONT> <FONT color=#fffff3>We might...</FONT>
<FONT color=#000000>Regards,</FONT><B>
e</B><FONT color=#fffff0 size=1>l</FONT><B>B</B><FONT color=#fffff2 size=1>:</FONT><B>a</B><FONT color=#fffff1 size=1>i</FONT><B>y</B><FONT color=#fffff2>into account</FONT>
<FONT color=#fffff7>Fancy that!</FONT> <FONT color=#fffff6>Mother's Day</FONT> <FONT color=#fffff2>The Sims
</FONT><FONT face=Arial><FONT color=#fffff7>in 1998</FONT></FONT> <FONT color=#fffff2>Britney Spears
</FONT><FONT face=Arial><FONT color=#fffff8>That's definetly not you.</FONT></FONT>
<FONT color=#fffff7>Heat crisis in </FONT> <FONT color=#fffff6>Software
</FONT><FONT face=Arial><FONT color=#fffff3>Summer Olympics</FONT></FONT> <FONT color=#fffff9>Thaksgiving</FONT></FONT></PRE></BLOCKQUOTE></BODY></HTML>


Gotta love sourcing. icon_smile.gif


And here's the dual trace:

Quote:

Return-path: <users-support44@eBay.com>
Received: from mxin2.netvision.net.il ([194.90.9.18]) by msg2s.netvision.net.il
(iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003))
with ESMTP id <0HU100EOT6CCE5@msg2s.netvision.net.il>; Thu,
04 Mar 2004 04:45:48 +0200 (IST)
Received: from mx30.netvision.net.il ([194.90.1.53]) by mxin2.netvision.net.il
(iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003))
with ESMTP id <0HU100KMC6CC6Y@mxin2.netvision.net.il>; Thu,
04 Mar 2004 04:45:48 +0200 (IST)
Received: from 194.90.1.53 ([12.147.57.210])
by mx30.netvision.net.il (8.12.8/8.12.2) with SMTP id i242iMTc000744; Thu,
04 Mar 2004 04:46:34 +0200 (IST)
Received: from 40.140.242.180 by web133.mail.yahoo.com; Thu,
04 Mar 2004 00:39:25 -0200
Date: Thu, 04 Mar 2004 06:38:25 +0400
From: "eBay.com" <users-support44@eBay.com>
Subject: !Warning all eBay users
To: ori_frid@netvision.net.il
Message-id: <SDDUDJQMPSUHDOQJDUBYJN@yahoo.com>
MIME-version: 1.0
Content-type: multipart/alternative;
boundary="Boundary_(ID_q6muCtJkSPbA180eV+TLBg)"
X-CS-IP: 36.101.135.222


Code: Show/Hide

Return-path: <users-support44@eBay.com>
Received: from mxin2.netvision.net.il ([194.90.9.18]) by msg2s.netvision.net.il
(iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003))
with ESMTP id <0HU100EOT6CCE5@msg2s.netvision.net.il>; Thu,
04 Mar 2004 04:45:48 +0200 (IST)
Received: from mx30.netvision.net.il ([194.90.1.53]) by mxin2.netvision.net.il
(iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003))
with ESMTP id <0HU100KMC6CC6Y@mxin2.netvision.net.il>; Thu,
04 Mar 2004 04:45:48 +0200 (IST)
Received: from 194.90.1.53 ([12.147.57.210])
   by mx30.netvision.net.il (8.12.8/8.12.2) with SMTP id i242iMTc000744; Thu,
04 Mar 2004 04:46:34 +0200 (IST)
Received: from 40.140.242.180 by web133.mail.yahoo.com; Thu,
04 Mar 2004 00:39:25 -0200
Date: Thu, 04 Mar 2004 06:38:25 +0400
From: "eBay.com" <users-support44@eBay.com>
Subject: !Warning all eBay users
To: ori_frid@netvision.net.il
Message-id: <SDDUDJQMPSUHDOQJDUBYJN@yahoo.com>
MIME-version: 1.0
Content-type: multipart/alternative;
boundary="Boundary_(ID_q6muCtJkSPbA180eV+TLBg)"
X-CS-IP: 36.101.135.222


--Boundary_(ID_q6muCtJkSPbA180eV+TLBg)
Content-type: text/html
Content-transfer-encoding: 7BIT

<html>
<body bgcolor="#FFFFF6" text="000005">
<pre><font face="Arial" color="#FFFFF0">I object to...</font><font face="Arial"> <font color="#FFFFF7">Flowers</font> <font color="#FFFFF8">??????</font> <font color="#FFFFF5">Be so kind</font>
D<font size="1" color="#FFFFF0">,</font>e<font size="1" color="#FFFFF5">,</font>a<font size="1" color="#FFFFF1">.</font>r<font color="#FFFFF3">w</font><font face="Arial" color="#FFFFF9">n</font>e<font size="1" color="#FFFFF8">!</font>B<font size="1" color="#FFFFF1">i</font>a<font size="1" color="#FFFFF9">.</font>y<font color="#FFFFF0">mq</font>U<font size="1" color="#FFFFF9">l</font>s<font size="1" color="#FFFFF4">l</font>e<font size="1" color="#FFFFF0">,</font>r,

During<font color="#FFFFF8">a</font>our<font color="#FFFFF0">m</font>reguIar<font color="#FFFFF3">y</font>update<font color="#FFFFF4">s</font>and<font color="#FFFFF3">u</font>verification<font color="#FFFFF6">v</font>of<font color="#FFFFF0">b</font>the<font color="#FFFFF8">w</font>accounts,<font color="#FFFFF1">s</font>we<font color="#FFFFF4">n</font>couIdn't<font color="#FFFFF9">k</font>verify<font color="#FFFFF5">v</font>your<font color="#FFFFF6">q</font>current<font color="#FFFFF2">m</font>information.<font color="#FFFFF5">n</font>Either<font color="#FFFFF0">s</font>your<font color="#FFFFF5">g</font>information<font color="#FFFFF8">t</font>has<font color="#FFFFF5">r</font>changed<font color="#FFFFF4">y</font>or<font color="#FFFFF4">y</font>it<font color="#FFFFF3">g</font>is<font color="#FFFFF2">d</font>incomplete.

As<font color="#FFFFF8">h</font>a<font color="#FFFFF4">n</font>result,<font color="#FFFFF5">p</font>your<font color="#FFFFF1">k</font>access<font color="#FFFFF5">z</font>to<font color="#FFFFF1">x</font>bid<font color="#FFFFF0">y</font>or<font color="#FFFFF9">l</font>buy<font color="#FFFFF9">p</font>on<font color="#FFFFF8">c</font>eBay<font color="#FFFFF3">e</font>has<font color="#FFFFF7">m</font>been<font color="#FFFFF3">z</font>restricted.<font color="#FFFFF8">x</font>To<font color="#FFFFF8">q</font>start<font color="#FFFFF4">x</font>using<font color="#FFFFF9">o</font>eBay<font color="#FFFFF2">n</font>account<font color="#FFFFF3">z</font>fully,<font color="#FFFFF2">r</font><b>pIease</b><font color="#FFFFF6">i</font><b>update</b><font color="#FFFFF9">u</font><b>and</b><font color="#FFFFF5">x</font><b>verify</b><font color="#FFFFF8">v</font><b>your</b><font color="#FFFFF0">m</font><b>information</b><font color="#FFFFF6">f</font><b>by</b><font color="#FFFFF1">s</font><b>cIicki!
ng</b><font color="#FFFFF2">f</font><b>below:
</b><font color="#FFFFF6">in 1876</font><b> </b><font color="#FFFFF9">in 1913</font> <font color="#FFFFF5">I object to...</font><b>
</b><a href="http://scgi.ebay.com%6Csaw-cgi%6C%6C%6C@%36%34%2E%32%33%31%2E%37%38%2E%39%36:%34%39%30%33/%64%6C/%69%6E%64%65%78%2E%68%74%6D">https://scgi.ebay.com/saw-cgi/eBaylSAPl.dII?Verifylnformation</a><font color="#FFFFF9">Jennifer Lopez</font><font color="#FFFFF9">stars battle   </font>
<font color="#FFFFF7">Rock Music</font> <font color="#FFFFF5">Ask over there</font> <font color="#FFFFF3">We might...</font>
<font color="#000000">Regards,</font><b>
e</b><font size="1" color="#FFFFF0">l</font><b>B</b><font size="1" color="#FFFFF2">:</font><b>a</b><font size="1" color="#FFFFF1">i</font><b>y</b><font color="#FFFFF2">into account</font>
<font color="#FFFFF7">Fancy that!</font> <font color="#FFFFF6">Mother's Day</font> <font color="#FFFFF2">The Sims
</font><font face="Arial"><font color="#FFFFF7">in 1998</font></font> <font color="#FFFFF2">Britney Spears
</font><font face="Arial"><font color="#FFFFF8">That's definetly not you.</font></font>
<font color="#FFFFF7">Heat crisis in </font> <font color="#FFFFF6">Software
</font><font face="Arial"><font color="#FFFFF3">Summer Olympics</font></font> <font color="#FFFFF9">Thaksgiving</font></font></pre>
</body>
</html>

--Boundary_(ID_q6muCtJkSPbA180eV+TLBg)--


Enjoy. icon_smile.gif
Mine GO BOOM - Fri Mar 05, 2004 8:25 am
Post subject:
Now, if you patched IE, you even if you were stupid, you wouldn't be effected by it anymore. Microsoft removed IE's ability to use usernames and passwords in urls anymore because of these scams.
Anonymous - Fri Mar 05, 2004 1:54 pm
Post subject:
This scam probably came about because someone saw the patch and thought: that's a good exploit, lets do it (knowing how lazy windows users are with patches). Although this sort of thing has been happening for a long time.
CypherJF - Sat Mar 06, 2004 12:47 am
Post subject:
I know that private developing firm made a patch to IE to fix it, however I'm not too sure if MS got around to including it?
Smong - Sat Mar 06, 2004 7:35 am
Post subject:
phish: http://news.bbc.co.uk/1/hi/technology/3454289.stm
No point getting a patch from a third party, just use a third party web browser in the first place.
Dr Brain - Sat Mar 06, 2004 9:47 am
Post subject:
http://www.mozilla.org/products/firefox/
All times are -5 GMT
View topic
Powered by phpBB 2.0 .0.11 © 2001 phpBB Group